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In the Claims 

L (currently amended) A versatile customizable combination system for 
providing filtering of outbound requests for access to web sites on the Internet and/or for 
controlling inbound requests from the Internet for access to a web site of the system, 
comprising: 

a plurality of computer users, 

one or a plurality of user computers, each having a dynamically allocated Internet 
protocol address or a static Internet Protocol address, 

an administrative module/mterfece that Includes configuration settings for 
inbound communications and for outbound communications, has list maintenance 
functions including list editing, list deleting, searching of lists, saving of lists, proxy 
chaining routing, adding and deleting users, interchanging lists and importing and 
exporting lists, 

said administrative module located in a user computer for configuring a range of 
access levels and being capable of creatmg three types of user accounts that require 
unique authentication credentials for each user account including an administrator 
account that is self-configurings tad regular accounts with v aiying omounta of 
adnunistrative privileges other than the privilege to create additional accounts or view 
information on any other accounts and regular accounts wit hout administrative privileges, 

a first proxy server in one or a plurality of user computers of a local area network 
with access to the world wide web, each of said first proxy server having a friendly 
outbound list and/or an unfiiendly outbound list only one of which is active at any given 
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time, and/or having a friendly inbound list and/or an unfriendly inbound list only one of 
which is active at any given time, the friendly outbound list, the unfriendly outbound list, 
the friendly inbound list and the unfriendly inbound lists being uniquely configurable for 
each user account, 

said first proxy server programmed to receive a request from an HTTP client, 
check the identity of a requesting client and/or of a requested URL against the friendly 
inbound, fiiendly outbound, unfriendly mbound or unfriendly outbound list maintained 
by the administrative module and then either approve the request, terminate the request or 
re-route the request, 

a second proxy server^ without the administrative module or the friendly or the 
unfriendly lists^ placed between the first proxy server and the Internet, the second proxy 
server being capable of conmiunicating to a proxy of a destination or directly to a 
destination, said second proxy server having an Internet Protocol address configurable 
only by a bolder of the administrator account or a regular account with administrative 
privileges, 

the first proxy server programmed to forward the reques t to the second proxy 
server if and when said first proxy server app roves the request. 

the first proxy server and the second proxy server have a network communication 
link between them. 

2. (currently amended) The system of claim 1, wherein the second proxy server is 
has all the characteristics of a first proxy server but has an empty unfriendly outbound 
list. 
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3. (currently amended) The system of claim 1, wherein a third proxy server and/or 
additional proxy servers forward inbound requests for resources to efe^ proxy servers 
other than the first and second proxY servers . 

4. (currently amended) The system of claim 1, wherein the system is compatible 
v^th dialup modem connection to the Internet, the system is compatible with a local area 
network and the system is compatlhle with virtual network connection . 

5- (currently amended) A versatile customizable combination system for 
providing filtering of outbound requests for access to web sites on the Internet and/or for 
controlling inbound requests from the Internet for access to a web site of the system, 
comprising: 

a plurality of computer users, 

one or a plurality of user computers, each having a dynamically allocated Internet 
protocol address or a static Internet Protocol address, 

an administrative module/interface that includes configuration settings for 
inbound conmiunications and for outbound communications, has list maintenance 
functions including list editing, list deleting, searching of lists, saving of lists, proxy 
chaining routing, adding and deleting users, interchanging lists and importing and 
exporting lists, 

said administrative module located in a user computer for configuring a range of 
access levels and being capable of creating three types of user accounts that require 
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unique authentication credentials for each user account including an administrator 
account that is self-configuiin& mi regular accounts with varying amounto of 
administrative privileges other than the privilege to create additional accounts or view 
information on any other accounts and regular accounts without ad ministrative privileges^ 
a first proxy server in one or a plurality of user computers of a local area network 
with access to the world wide web, each of said ^ fist proxy server having a friendly 
outboxmd list and/or an unfriendly outbound list only one of which is active at any given 
time, and/or having a friendly inbound list and/or an unfriendly inbound list only one of 
which is active at any given time, the friendly outbound list, the unfriendly outbound list, 
the friendly inbound list and the unfriendly inbound list being uniquely configurable for 

by each user account, 

said first proxy server programmed to receive a request from an HTTP client, 
check the identity of a requesting client and/or of a requested URL against the friendly 
inbound^ friendly outbound, unfriendly inbound or unfriendly outbound list maintained 
by the administrative module and then either approve the request, terminate the request or 
re-route the request, 

a second proxy server^ without the administrative module and without a the 
friendly or the unfriendly lists^ placed between the first proxy server and a resource, the 
second proxy server being capable of communicating to a proxy of a destination or 
directly to a destination, said second proxy server having an Internet Protocol address 
configurable only by a holder of the administrator account or a regular account with 
administrative privileges, 

the first proxy server proCTammed to forward the req uest to the second proxy 
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server if and when said first proxy server appr oves the request 

the first proxy server and the second proxy server have a communication link 
between them. 

6. (currently amended) The system of claim 5, wherein the second proxy server is 
has all the characteristics of a first proxy server but has an empty unfriendly outbound 
list. 

7. (currently amended) A versatile customizable combination system for 
providing filtering of outbound requests for access to web sites on the Internet and/or for 
controlling inbound requests from the Internet for access to a web site of the system, 
comprising: 

a plurality of computer users, 

one or a plurality of user computers, each having a dynamically allocated Internet 
protocol address or a static Intemet Protocol address, 

an administrative module/interfece that includes configuration settings for 
inbound communications and for outbound communications, has list maintenance 
functions including list editing, list deleting, searching of lists, saving of lists, adding and 
deleting users, interchanging lists and importing and exporting lists, 

said administrative module located in a user computer for configuring a range of 
access levels and being capable of creating three types of user accounts that require 
unique authentication credentials for each user account including an administrator 
account that is self-configurings aad regular accounts with v arying omounto of 

-6- 

PAGE 7/45 ' RCVD AT M007 3:13:03 PM [Eastern Standard Time] ' SVR:USPTO^ FXRF-5117 * DNIS:2730992 ' CSID: ' DURATION (mm-ss):0648 



FEB-07-2007 15=26 



P. 08 



administrative privileges other than the privilege to create add itional accounts or view 
information on anv other accounts and regular accounts w ithout administrative privileges, 
a first proxy server in one or a plurality of user computers of a local area network 
with access to the worid wide web, each of said first proxy server having a friendly 
outbound list and/or an unfiiendly outbound list only one of which is active at any given 
time, and/or having a friendly inbound list and/or an unfiiendly inbound list only one of 
which is active at any given time, the friendly outbound list, the unfriendly outbound list, 
the friendly inbound list and the unfiiendly inbound lists being uniquely configurable for 
each user account, 

said first proxy server programmed to receive a request from an HTTP client, 
check the identity of a requesting client and/or of a requested URL agauist the firiendly 
inbound, friendly outbound, unfriendly inbound or unfiiendly outbound list maintained 
by the administrative module and then either approve the request, terminate the request or 
re-route the request- 

8. (currently amended) The system of claim 7, wherein the range of access levels 
ri.ngR< frr>m iwaximum aUovying all access to Ml suGp Q nsion . allowinR no access at 

all. 

9. (currently amended) The system of claim 1, whoroin tho throe typoQ of user 
aooountfl that roquiro unique auth e ntication or e dontiols for e ach ugor aooount molud e an 
adminifltmtor acoount that ia aolf configuring, r e gulor aooounta with adminiutrative 
privilcgoo othor than tho privilogo to oroato additional aooounts or viow information on 
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ony other acoounto ond regular aocounta ^^ithout administrativo privil e g e s and gdd 
administrative module bcin^ capable of also creating in addition a fourth type of user 
account namely one anonymous guest user account to be used by general users without 
authentication credentials. 

10. (currently amended) The system of claim 5, wh e r e in th e throo typ e u of us e r 
a eoounts that roguiro uniqu e authontioation ored e ntiols for OQoh us e r account inolud e on 
administrator oocount that is solf oonfiguring, rogulor Qooounts with administrativ e 
privil e g e a other than tho privilogo to cr e at e additional oooounts or view infonnation on 
fi fty oth e r accounto and regular accounts without adimnistrativ e privilogoa and in addition 
said admini strative module being capable of also creating a fourth type of user account 
namely one anonymous guest user account to be used by general users without 
authentication credentials. 

1 1 . (currently amended) A versatile customizable combination system for 
providing filtering of outbound requests for access to web sites on the Internet and/or for 
controlling inbound requests from the Intemet for access to a web site of the system, 
comprising: 

a plurality of computer users, 

one or a plurality of user computers, each having a dynamically allocated Litemet 
protocol address or a static Intemet Protocol address, 

an administrative module/interface that includes configuration settings for 
inbound communications and for outbound communications, has list maintenance 
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functions including list editing, list deleting, searching of lists, saving of lists, adding and 
deleting users, interchanging lists and importing and exporting lists, 

said administrative module located in a user computer for configuring a range of 
access levels and being capable of creating three types of user accounts that require 
unique authentication credentials for each user account including an administrator 
account that is self-configurings e»d regular accounts with varying amounts of 
administrative privileges ftthftt than t he privilege to create additional accounts or vievr 
information on anv other accounts and regular accounts wit hout administrative privileges, 

a first proxy server in one or a plurality of user computers of a local area network 
with access to the world wide web, each of said firet fist proxy server having a friendly 
outbound list and/or an unfiiendly outbound list only one of which is active at any given 
time, and/or having a fiiendly inbound list and/or an unfiiendly inbound list only one of 
which is active at any given time, the fifiendly outbound list, the unfiiendly outbound list, 
the fiiendly inbound list and the unfiiendly inbound list being uniquely configurable for 

each user account, and 

said first proxy server programmed to receive a request from an HTTP client, 
check the identity of a requesting client and/or of a requested URL against the fiiendly 
inbound, fiiendly outbound, unfiiendly inbound or unfiiendly outbound list maintained 
by the administrative module and then either approve the request, temnnate the request or 
re-route the request. 

12. (currently amended) The system of claim 1 1 , wherein ^ a first proxy server 
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13. (currently amended) The system of claim 12, wherein the range of access 
levels ranges from mmdmiim 1 QQ?4 allnwinp all access to full ouoponcion aUowinR no 
access at all . 

14. (currently amended) The system of claim 1 , wherein a first proxy server is 
in each and every user computer. 

1 5. (currently amended) The system of claim 1 4, wherein the range of access 
levels ranges from allovwng all access maximum 100% ooooss to aUovyine no access at all 
full susponflion . 

16. (currendy amended) The system of claim 5, wherieinfee a first proxy server is 
in each and every user computer. 

17. (cuitently amended) The system of claim 16, wherein the range of access 
levels ranges from maJtimum 100% allowing all access to allovying no access at all fett 
guoponoion . 

18. (cunently amended) The system of claim 7, wherein the a first proxy server is 
in each and every user computer. 

1 9. (currently amended) The system of claim 1 8, wherein the range of access 
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levels ranges from H Mxinmm 100% allowing all access to Ml tmgp e nsion allowiiiR no 
access at all . 

20. (currently amended) The system of claim 1* wherein the range of access levels 
ranges from maximum 100% allovring all access to full ouopenaion allowing no access at 
all. 

21. (currently amended) The system of claim 5, wherein the range of access levels 
ranges from maximum 1 00% allowing all access to full susp e nsion allowing no access at 
all. 

22. (currently amended) The system of claim 1 1, wherein the range of access 
levels ranges from maximum t O0% allowing all access to full suflp e nsion allovying no 
access at all . 

23. (currently amended) The system of claim 5, wherein die system is compatible 
with dialup modem connection to the Internet, the system is compatible with a local area 
network and the system is compatible with virtual network connection. 

24. (currently amended) The system of claim 23, wherein the range of access 
levels ranges from maximum 100% allowing all access to full guop e nsioQ allowing no 
access at all. 
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25. (currently amended) The system of claim 7, wherein the system is compatible 
with dialup modem connection to the Internet, the system is compatible with a local area 
netwoii: and the system is compatible with virtual network connection. 

26. (currently amended) The system of claim 25, wherein the range of access 
levels ranges from mcudmum 1 06% allowing all access to full swpeaai^ allowing no 
access at all. 

27. (cuirently amended) The system of claim 1 1, wherein the system is 
compatible with dialup modem connection to the Internet, the system is compatible with 
a local area network and the system is compatible with virtual network connection. 

28. (currently amended) The system of claim 27, wherein the range of access 
levels ranges from maxhnum 10094 . allowing all access to allowing no access at all ^ 
fl usp e n s ion . 



gdminigtrator occount that io self ooDfiguring, rogulor aocounta adminiDtrativo 
privilogoQ other than the privil e g e to oroat e additional oocounts or vi e w information O ft 
any other aooountg and regular accounto inthout n dminifltrativo - privilogoo and m addition 
said admmistrative module beme capable of also creating a fourth type of user account 
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authentication credentials- 

30. (currently amended) The system of claim 11, wh e r e in th e throe typos of uaor 
Qooounts that requir e uniquo authontioation or e dontiQls for each ugor aooount includo on 
odminiGtrator oocount that is solf configuring, rogulor aooounts with odminigtrativ e 
privil e g es othor than th e privil e g e to oroate additional aooounts or viow information on 
any othor aooounta and rogulor aooounta without adminiotrativ e privilogofl and in addition 
said administrative module being capable of also creating a fourth type of user account 
namely one anonymous guest user account to be used by general users without 
authentication credentials. 

31. (canceled) 

32. (currently amended) The system of claim 71 , wherein the range of access 
levels ranges from maximum 10 0% allowing all access to allowing no access at all fall 
Guopenflion . 

33. (currently amended) The system of claim 71, wherein the system is 
compatible with dialup modem connection to the Internet, the system is compatible with 
a local area network and the svstem is compatible with virtual network connection, 

34. (currently amended) The system of claim 33, wherein the range of access 
levels ranges from maximum 100^ 0 allowing all access to allowing no access at all fell 
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35. (canceled) 

36. (canceled) 

37. (currently amended) The system of claim 84, \^^erein the range of access 
levels ranges from incudmum 100?< » allowing all access to allowing no access at all ^ 
s usp e nsion . 

38. (currently amended) The system of claim 84, wherem the system is 
compatible with dialup modem connection to the Internet, the system is compatible with 
a local area network and the system is compatible with virtual network connection. 

39. (currently amended) The system of claim 38, wherein the range of access 
levels ranges from maadmum 10Q?^ o allowing all access to allowing no access at all fett 
suGponsion . 

40. (canceled) 

41. (currently amended) A versatile customizable combination system for 
providing filtering of outbound requests for access to web sites on the Internet, 
comprising: 
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a plurality of computer users, 

one or a plurality of user computers, each having a dynamically allocated Internet 

» 

protocol address or a static Internet Protocol address, 

an administrative module/interface that includes configuration settings for 
outbound communications, has list maintenance functions including list editing, list 
deleting, searching of lists, saving of lists, proxy chaining routing, adding and deleting 
users, interchanging lists and importing and exporting lists, 

said administrative module located in a user computer for configuring a range of 
access levels and bemg capable of creating three types of user accounts that require 
unique authentication credentials for each user account including an administrator 
account that is self-configurings and regular accounts with v Qr>ing omounta of 
administrative privileges other than the privilege to create add itional accounts or view 
information on anv other accounts and regular accounts with out administrative privileges, 

a first proxy server in one or a plurality of user computers of a local area network 
with access to the worid wide web, each of said first proxy server having a friendly 
outbound list and/or an unfriendly outbound list only one of which is active at any given 
time, the fiiendly outbound list and the unfriendly outbound list being uniquely 
configurable for each user account, 

said first proxy server programmed to receive a request from an HTTP client, 
check the identity of a requested URL against the fiiendly outbound list or unfriendly 
outbound list maintained by the administrative module and then either approve the 
request, terminate the request or re-route the request, 

a second proxy server without the administrative module or the friendly or the 
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unfriendly lists placed between the first proxy server and the Internet, the second proxy 
server being capable of commimicating to a proxy of a destination or directly to a 
destination, said second proxy server having an Internet Protocol address configurable 
only by a holder of the administrator account or a regular account vvith administrative 
privileges, 

the first proxy server programmed to forward the req uest to the second proxy 
server if and when said first proxy server app roves the request 

the first proxy server and the second proxy server have a network communication 
link between them. 

42. (currently amended) The system of claim 41, whoroin the three t)poG of uoer 
accounts that require uniqu e auth e ntiootion orcdontiQls for oooh us e r gooount inoludo on 
adminiotmtor account that is oolf configuring, r e gular oooounts with odministrati - v e 
privilogeg other than the privilogo to cr e at e additional aceeunts or view information on 
any other aooounts and rogulor oooounts without administrativo privilcgCG and in addition 
^^'lA arlmini strativc module being capable of also creatine a fourth type of user account 
namely one anonymous guest user account to be used by general users v^thout 
authentication credentials. 

43. (currently amended) The system of claim 41, wherein the range of access 
levels ranges fi*om mtacimum 1 -06% allovying all access to allowing no access at all fell 
fltts p e n s ion . 
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44. (currently amended) The system of claim 41^ v^erein the system is 
compatible with dialup modem connection to the Internet, the system is compatible with 
a local area network and the system is compatible with virtual network connection 

45. (currently amended) The system of claim 44, wherein the range of access 
leyels ranges from maximum allowing all access to allowing no access at all ie3i 
sttspe nsion . 

46. (currently amended) A versatile customizable combination system for 
providing filtering of outbound requests for access to web sites on the Internet, 
comprising; 

a plurality of computer users, 

one or a plurality of user computers, each having a dynamically allocated Internet 
protocol address or a static Internet Protocol address, 

an administrative module/interface that includes configuration settings for 
outbound communications, has list maintenance functions including list editing, list 
deleting, searching of lists, saving of lists, adding and deleting users, interchanging lists 
and importing and exporting lists, 

said administrative module located in a user computer for configuring a range of 
access levels and being capable of creating three types of user accounts that require 
unique authentication credentials for each user account including an administrator 
account that is self-configurings and regular accounts with varying omountis of 
administrative privileges other than the privilege t o create additional accounts or view 
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information on any other accounts and regxUar accounts without administrativ e privileges, 
a first proxy server in one or a plurality of user computers of a local area network 
with access to the world wide web, each of said first Hsil proxy server having a friendly 
outbound list and/or an unfriendly outbound list only one of which is active at any given 
time, the friendly outbound list and the unfriendly outbound list being uniquely 
configurable for each user account, and 

said first proxy server programmed to receive a request from an HTTP client, 
check the identity of a requested URL against the friendly outbound or unfriendly 
outbound list maintained by the administrative module and then either approve the 
request, terminate the request or re-route the request without the knowledge of the user. 

47. (currently amended) The system of claim 46, w heroin tho throo typ e s of us e r 
aooQunto that r e quire uniqu e guthonticQtion cr e d e ntial s for OQch uaor oooount includo on 
odminiotrator account that i s s elf oonfiguring, r e gular aocounto with odministrativ e 
privil ege s other than th e privil e g e to cr e ate additional accounts or vi e w informati on-en 
any othor aooounto and r e gular aooounts without odminiotrativ e privilogoo and in addition 
said administrative module heinp capable of also creating a fourth type of user account 
namely one anonymous guest user account to be used by general users without 
authentication credentials. 

48. (currently amended) The system of claim 46, wherein the range of access 
levels ranges from maximum 100% allowing all access to allowing no access at all feU 
susp e nsion ^ 
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49. (currently amended) The system of claim 46^ wherein the system is 
compatible with dialup modem connection to the Internet, the system is compatible with 
a local area network and the system is compatible with virtual network connection. 

50. (currently amended) The system of claim 49, wherein the range of access 
levels ranges from maximum 100^4 allowing all access to allowing no access at all &ft 
SUGponflion . 

5 1 . (previously presented) The system of claim 1 , wherein said first proxy server 
is also progranunaed to register the request in a logfile of all web sites requested by a user. 

52. (previously presented) The system of claim 5, wherein said first proxy server 
is also programmed to register the request in a logfile of all web sites requested by a user. 

53. (previously presented) The system of claim 7, wherein said first proxy server 
is also programmed to register the request in a logfile of all web sites requested by a user, 

54. (previously pifesented) The system of claim 1 1, v^erein said first proxy server 
is also programmed to register the request in a logfile of all web sites requested by a user. 

55. (previously presented) The system of claim 61, wherein said first proxy server 
is also programmed to register the request in a logfile of all web sites requested by a user. 
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56. (previously presented) The system of claim 71, wherein said first proxy server 
is also programmed to register the request in a logfile of all web sites requested by a user. 

57. (previously presented) The system of claim 41 , wherein said first proxy server 
is also programmed to register the request in a logfile of all web sites requested by a user» 

58. (previously presented) The system of claim 46^ wherein said first proxy server 
is also programmed to register the request in a logfile of all web sites requested by a user. 

59. (currently amended) The system of claim 9 +, wherein the first proxy server 
is programmed to check the identity of a user who logs into the first proxy server and 
who presents a unique authentication credential prior to checking the identity of ±e 
requesting client and/or requested URL against the list or lists. 

60. (previously presented) The system of claim 59, wherein the first proxy server 
is programmed, upon a successfial authentication of the user's credential, to use a 
configuration of the user's account to check the identity of the requesting client and/or 
requested URL against the list or lists. 

61 . (previously presented) The system of claim 59, wherein the first proxy server 
is programmed that if said first proxy server fails to authenticate the user, then the first 
proxy server offers that user an opportunity to log in as an anonymous guest user. 
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62, (currently amended) The system of claim 1, wherein a third proxy server 
and/or additional proxy servers forward the outbound requests for access to web sites to 
other proxy servers other than the first and second proxy servers . 

63, (currently amended) The system of claim 10 wherein inbound 
communications are arranged so that an actual location of an important resource is 
located in an unpublished location that is a replacement location to which requests 
rejected by the first proxy server are rerouted, wherein approv e d clients of approved users 
are listed in the first proxy server in the unfiriendly inbound list and are sent by the first 
proxy server to the replacement location, and wherein taiapprov e d clients of unapproved 
users are not listed in the unfiiendly inbound list and have their request sent to a 
published address that contains unimportant information 

64, (currently amended) The system of claim 63, wherem a third proxy server 
and/or additional proxy servers forward inbound requests for resources to other proxy 
servers other than the first and second proxv servers . 

65, (currently amended) The system of claim 63, wherein a third proxy server 
and/or additional proxy servers forward the outbound requests for access to web sites to 
ether proxy servers other than the first and second proxy servers , 

66, (currently amended) The system of claim 5, wherein a third proxy server 
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and/or additional proxy servers forward inbound requests for resources to eA» proxy 
servers other than the first and second proxy servers , 

67. (currently amended) The system of claim 5, wherein a third proxy server 
and/or additional proxy servers forward the outbound requests for access to web sites to 
oth e r proxy servers other than the first and second proxy servers . 

68. (previously presented) The system of claim 63, ^^erein the first proxy server 
is programmed to check the identity of a user who logs into the first proxy server and 
who presents a unique authentication credential against a valid user account prior to 
checking the identity of the requesting client and/or requested URL against the list or 
lists. 

69. (previously presented) The system of claim 68, wherein the first proxy server 
is programmed, upon a successfiil authentication of the user's credential, to use a 
configuration of the user's account to check the identity of the requesting client and/or 
requested URL against the list or lists. 

70. (currently amended) The system of claim 68, wiierein said administrative 
module being capable of also creating a fourth type of user accoun t nflmfiiy one 
anonymous guest user account to be used bv generd users with out authentication 
credentials and wherein the first proxy server is programmed that if said first proxy server 
fails to authenticate the user then the first proxy server offers that \iser an opportunity to 
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log in as an anonymoxis guest user, 

71- (currently amended) The system of cl^ 10 wherein inbound 
communications are arranged so that an actual location of an important resource is 
located iti an unpublished location that is a replacement location to which requests 
rejected by the first proxy server are rerouted, wherein approv e d clients of approved users 
are not listed in the first proxy server in the friendly inbound list and are sent by the first 
proxy server to the replacement location, and wherein unapprov e d clients of imapprovcd 
users are listed in the fiiendly inbound list and have their request sent to a published 
address that contains unimportant information, 

72. (currently amended) The system of claim 71, wherein a third proxy server 
and/or additional proxy servers forward inbound requests for resources to etbw proxy 
servers other than the first and second proxv servers . 

73. (currently amended) The system of claim 71, wiierein a third proxy server 
and/or additional proxy servers forward the outbound requests for access to web sites to 
oth e r proxy servers other than the first and second proxv servers . 

74. (previously presented) The system of claim 71, wherein the first proxy server 
is programmed to check the identity of a user who logs into the first proxy server and 
who presents a unique authentication credential against a valid user account prior to 
checking the identity of the requesting client and/or requested URL against the list or 
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lists. 

75. (previously presented) The system of claim 74, wherein the first proxy server 
is programmed, upon a successful authentication of the user's credential, to use a 
configuration of the user's account to check the identity of the requesting client and/or 
requested URL against the list or lists. 

76. (previously presented) The system of claim 74, wherein the first proxy server 
is programmed that if said first proxy server fails to authenticate the user, then the first 
proxy server offers that user an opportunity to log in as an anonymous guest user, 

77. (currently amended) The system of claim 10 5, wherein the first proxy server 
is programmed to check the identity of a user who logs into the first proxy server and 
who presents a unique authentication credential against a valid user account prior to 
checking the identity of the requesting client and/or requested URL against the list or 
lists. 

78/(previously presented) The system of claim 77, wherein the first proxy server 
is programmed, upon a successful authentication of the user's credential, to use a 
configuration of the user's account to check the identity of the requesting client and/or 
requested URL against the list or lists. 

79. (previously presented) The system of claim 77, wherem the first proxy server 
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is prograimned that if said first proxy server fails to authenticate the user, then the first 
proxy server offers that user an opportunity to log in as an anonymous guest xjser. 

80, (currently amended) The system of claim 7 29, v^herein inbound 
communications are arranged so that an actual location of an important resource is 
located in an impublished location that is a replacement location to which requests 
rejected by the first proxy server are rerouted, wherein cyprov e d clients of approved users 
are listed in the first proxy server in the unfriendly inbound list and are sent by the first 
proxy server to the replacement location, and wherein mapprov e d clients of unapproved 
users are not listed in the unfriendly inbound list and have their request sent to a 
published address that contains unimportant inforaiation 

81 , (previously presented) The system of claim 80, wherein the first proxy server 
is programmed to check the identity of a user who logs into the first proxy server and 
who presents a unique authentication credential against a valid user account prior to 
checking the identity of the requestmg cUent and/or requested URL against the list or 
lists, 

82, (previously presented) The system of claim 81, wherein the first proxy server 
is programmed, upon a successfiil authentication of the user*s credential, to use a 
configuration of the user's account to check the identity of the requesting client and/or 
requested URL against the list or lists. 
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83 . (currently amended) The system of claim 8 1 , v^^erein sai d administrative 
module being capable of also creating a fourth type of user account n amely one 
anonymous guest user account to be used bv general users without authentication 
credentials and wherein the first proxy seryer is programmed that if said first proxy server 
fails to authenticate the user, then the first proxy server offers that user an opportunity to 
log in as an anonymous guest user. 

84, (currently amended) The system of claim 7 29, wherein inbound 
communications are arranged so that an actual location of an important resource is 
located in an unpublished location that is a replacement location to which requests 
rejected by the first proxy server are rerouted, wherein approv e d clients of approved users 
are not listed in the first proxy server in the fiiendly inbound list and are sent by the first 
proxy server to the replacement location, and wherein unopprovod clients of unapproved 
users are listed in the friendly inbound list and have their request sent to a published 
address that contains unimportant information. 

85- (previously presented) The system of claim 84, wherein the first proxy server 
is programmed to check the identity of a user who logs into the first proxy server and 
who presents a unique authentication credential against a valid user accoimt prior to 
checking the identity of the requesting client and/or requested URL against the list or 
lists. 

86. (previously presented) The system of claim 85, wherein the first proxy server 

-26^ 

PAGE 27/45 * RCVD AT 2ff/2007 3:13:03 PM [Eastern Standard Time] * SVR:USPT0-EFXRF-SI17 ' DNIS:2730992 * CSID: ' DURATION (mm-ss):0648 



FEB-07-2007 15:29 

is programmed, upon a successful authentication of the user's credential, to use a 
configuration of the user's account to check the identity of the requesting client and/or 
requested URL against the list or lists, 

87. (previously presented) The system of claim 85, v^erein the first proxy server 
is programmed that if said first proxy server fails to authenticate the user, then the first 
proxy server offers that user an opportunity to log in as an anonymous guest user. 

88. (currentiy amended) The system of claim 29 wherein the first proxy server 
is programmed to check the identity of a user who logs into the first proxy server and 
who presents a unique authentication credential against a valid user account prior to 
checking the identity of the requesting client and/or requested URL against the list or 
lists, 

89, (previously presented) The system of claim 88, vdierein the first proxy server 
is programmed, upon a successful authentication of the user's credential, to use a 
configuration of the user's account to check the identity of the requestuig client and/or 
requested URL against the list or Usts. 

90, (previously presented) The system of claim 88, wherein the first proxy server 
is programmed that if said first proxy server fails to authenticate the user, then the first 
proxy server offers that user an opportunity to log in as an anonymous guest user, 
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91 . (currently amended) The system of claim 30 44, wherein the first pro3cy 
server is programmed to check the identity of a user who logs into the first proxy server 
and who presents a unique authentication credential against a valid user account prior to 
checking the identity of the requesting client and/or requested URL against the list or 
lists. 

9Z (previously presented) The system of claim 91, wherein the first proxy server 
is programmed, upon a successful authentication of the user's credential, to use a 
configuration of the user's account to check the identity of the requesting client and/or 
requested URL against the list or lists. 

93. (previously presented) The system of claim 91, wherein the first proxy server 
is programmed that if said first proxy server fidls to authenticate the user, then the first 
proxy server offers that user an opportunity to log in as an anonymous guest user. 

94. (currently amended) The system of claim ^ 4i, wherein the first proxy 
server is programmed to check the identity of a user who logs into the first proxy server 
and who presents a unique authentication credential against a valid user account prior to 
checking the identity of the requesting client and/or requested URL against the list or 
lists. 

95. (previously presented) The system of claim 94, wherein the first proxy server 
is programmed, upon a successful authentication of the user's credential, to use a 



-28- 



PAGE 29/45 * RCVD AT Wmi 3:13:03 PM [Eastern Standard Time] * SVR:USPT0-EFXRF-5I17 * DNIS:2730992 * CSID: ' DURATION (mm< s):0648 



FEB-07-2007 15:29 



P. 30 



configuration of the user's account to check the identity of the requesting client and/or 
requested URL against the list or lists. 

96, (previously presented) The system of claim 94, wherein the first proxy server 
is programmed that if said first proxy server fails to authenticate the user, then the first 
proxy server offers that user an opportunity to log in as an anonymous guest user. 

97, (currently amended) The system of claim 41 , wherein a third proxy server 
and/or additional proxy servers forward inbound requests for resources to other proxy 
servers other than the first and second proxy servers . 

98, (currently amended) The system of claim 41> wherem a third proxy server 
and/or additional proxy servers forward the outbound requests for access to web sites to 
etibef proxy servers other than the first and se cond proxv servers, 

99; (currently amended) The system of claim 47 44, wherein the first proxy server 
is programmed to check the identity of a user who logs mto the first proxy server and 
who presents a unique authentication credential against a valid user account prior to 
checking the identity of the requesting client and/or requested URL against the list or 
lists. 

100 (previously presented) The system of claim 99, wherein the first proxy server 
is programmed, upon a successfixl authentication of the user's credential, to use a 
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configuration of the user's account to check the identity of the requesting client and/or 
requested URL against the list or lists. 

10 U (previously presented) The system of claim 99, wherein the first proxy server 
is programmed that if said first proxy server feils to authenticate the user, then the first 
proxy server offers that user an opportunity to log in as an anonymous guest user. 

102. (previously presented) The system of clahn 80, wherein said first proxy 
server is also programmed to register the request in a logfile of all web sites requested by 
a user. 

103. (canceled) 

104. (canceled) 

105. (canceled) 

106. (canceled) 

107. (canceled) 

108. (canceled) 
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109, (canceled) 
no, (canceled) 
11 L (canceled) 

112. (canceled) 

113. (canceled) 

114. (canceled) 

115. (previously presented) The system of claim 59, wherein said first proxy 
server is also programmed to register the request in a logfile of all web sites requested by 
a user. 

1 16. (previously presented) The system of claim 68, wherein said first proxy 
server is also programmed to register the request in a logfile of all web sites requested by 
a user. 

1 17. (previously presented) The system of claim 74, wherein said first proxy 
server is also programmed to register the request in a logfile of all web sites requested by 
a user. 
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118. (previously presented) The system of claim 77, wherein said first proxy 
server is also programmed to register the request in a logfile of all web sites requested by 
a user. 

1 19. (previously presented) The system of claim 81, wherein said first proxy 
server is also programmed to register the request in a logfile of all web sites requested by 
a user. 

120. (previously presented) The system of claim 85, wherein said first proxy 
server is also programmed to register the request in a logfile of all web sites requested by 
a user. 

121. (previously presented) The system of claim 88, wherein said first proxy 
server is also programmed to register the request in a logfile of all web sites requested by 
a user. 

122. (previously presented) The system of claim 91, wherein said first proxy 
server is also programmed to register the request in a logfile of all web sites requested by 
a user. 

123. (previously presented) The system of claim 94, wherein said first proxy 
server is also programmed to register the request in a logfile of all web sites requested by 
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a user. 

124, (previously presented) The system of claim 99, wherein said first proxy 
server is also programmed to register the request in a logfile of all web sites requested by 
a user. 
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